We have been using the following script as part of our deployments since Apple silicon became a thing (I did not write the script). It appears that the “--agree-to-license” no longer functions in Tahoe and appears to invoke “help” in policy logs. Manually running “softwareupdate –-install-rosetta --agree-to-license” also returns “help” contents. Has anyone else seen this? #!/bin/bash# Installs Rosetta as needed on Apple Silicon Macs.exitcode=0# Determine OS version# Save current IFS stateOLDIFS=$IFSIFS='.' read osvers_major osvers_minor osvers_dot_version <<< "$(/usr/bin/sw_vers -productVersion)"# restore IFS to previous stateIFS=$OLDIFS# Check to see if the Mac is reporting itself as running macOS 11if [[ ${osvers_major} -ge 11 ]]; then# Check to see if the Mac needs Rosetta installed by testing the processor processor=$(/usr/sbin/sysctl -n machdep.cpu.brand_string | grep -o "Intel")if [[ -n "$processor" ]]; thenecho "$processor processor installed. No need to install Rosett

Since this came up during our meetup:The name "Jamf" is a reference to Laszlo Jamf, a character in the novel Gravity's Rainbow by Thomas Pynchon. It’s not an acronym. It’s not rude. It’s not what happens when you type “f” really hard.Knowing is half the battle. . .

I am looking for a script to remove old Jamf remote policies from Jamf cloud. We have several hundred of them I discovered after running Kmart tool. I found this one but I cannot get it to work. https://www.elliotjordan.com/posts/remove-remote-policies/ Thanks 

**Update regarding NFL and minor cleanup as of May 20, 2025** Hey Jamf Nation! JNUC 2025 is coming up at the Colorado Convention Center, and it’s time to start planning your Colorado adventure. Many of us are traveling from afar (I’m from Canada!), so I’ve compiled a list of fun activities to make the most of your trip. Locals, please chime in with your insider tips! JNUC Highlights: JNUC Party: The Wednesday bash is always a blast—think music, food, and networking. Don’t miss it! Vendor Parties: Free drinks, finger food, and epic giveaways (someone won an Apple Vision Pro last year!). Jamf Heroes: Not sure about 2025 plans, but check Jamf Nation for updates on this exclusive meetup. JNUC Info: JNUC 2025 Homepage | JNUC Overview Sports: Colorado Avalanche (NHL): I’m hoping to catch a game at Ball Arena! The 2025-2026 schedule drops in June/July. Check NHL.com or BallArena.com. Denver Broncos (NFL): Denver Broncos play in Philadelphia on Oct 5th, so no games. See NFL.com. Colorado Ro

Don’t forget to sign into your Apple Manager …• Sign into ASM and ABM for updated agreements• Banner: Settings->Global ->Automated device enrollment Accepting updated agreementsAfter Apple updates one of these agreements, any Apple Business Manager Administrator, Apple Business Essentials Administrator, or Apple School Manager Administrator must sign in to the program website to accept any new agreements. If you're an Administrator in Apple School Manager, sign in to https://school.apple.com. If you're an Administrator in Apple Business Manager or Apple Business Essentials, sign in to https://business.apple.com.  

Great success at our Benelux Apple Admins meet-up last last night! Thank you Mischa, Raf, Javier and Jonas for speaking and of course all attendees. On to the next one! 💪🏻 

With under-the-hood updates for macOS Tahoe 26, Mac Health Check (2.4.0) improves visual indicators for each of its various checks.https://snelson.us/mhc  

Anyone using TeamDynamix?  We are looking at changing our ticket system however, we want something that is integrated with JAMF or at the least user friendly with JAMF.  Any thoughts would be greatly appreciated

With 15.6 and beta macos 26The EA I was using for report back a macs SSID is now broken/blocked.Does any happed to have one that will works? Thanks #!/bin/sh# Jamf Extension attribute to return SSID## Check for SSID namewifi_name=$(ipconfig getsummary en0 | awk -F ' SSID : ' '/ SSID : / {print $2}')# Check if SSID is foundif [ -z "$wifi_name" ]; then    result="No Wi-Fi network found."else    result="$wifi_name"fi# Result for Jamfecho "<result>$result</result>"    

Hey Community!Whether you’re attending JNUC in person or watching from afar, we’re looking for a few amazing customers to take part in a quick 15-minute video interview during JNUC. As a thank you, participants will receive some exclusive conference swag 🎁. We’d especially love to hear from those who:✅ Work in Education or Healthcare OR✅ Are part of an organisation (any vertical) with 250–1,000 employees or 1,000–5,000 employees✅ Have experience with Blueprints, Compliance Benchmarks, or Endpoint Telemetry Your insights may be featured in:🎥 Promotional videos for JNUC🎥 Individual testimonials🎥 Customer success story highlights 👉 Interested? Comment below or email us at jamfnation@jamf.com to get involved. Not heading to JNUC but would love to share your story? Email jamfnation@jamf.com now!  Let’s showcase your story and celebrate your success at JNUC and beyond!

Hi dear Jamfies,  since im quite new to the whoe jamf environment and had to take over a whole functioning instance, i wanted to make Tahoe available via Graham Pugh’s “Erase-Install” script. The manual, i was left with described, that as first step, i have to create an entry via title editor and just copy and paste the information (with adjustments) from the earlier version. Now in my case, i cannot enable this title, meaning, it wont show up in Jamf Pro, please see attached screenshot. I also seem to fail understanding the note given, since the manual i was given from earlier coworkers does not mention any other steps besides copying and pasting the information on software title tab and requirements tab. Can someone help me out? Thanks in advance. 

For awhile both Jamf Pro and Jamf Protect had a Resource box on the dashboard page.  Both are gone now and we are just redirected to countless webpages to click through to find the information buried. Another useful tool gone….

Is it possible to create a Time Machine backup profile that limits the backup size depending on the clients storage. For example, if a Mac has 512gb storage I want to limit their backup size to 1TB but if they have 2TB storage I want to limit them to 4TB. Obviously I could create groups based on device storage size and apply a different config to each group. But I’m wondering if there’s some formula I could enter in the “Backup Size Limit” field or some other method to achieve this nicely. Thanks!

Hello guys, i am affected by the MS latest security patch Microsoft Active Directory Strong Certificate Mapping Requirements. My devices cant connect to wifi via certificates after the latest patch. My devices are not in domain, also users are local , so when i tried the objectsid Extension attribute it didnt work even though i have cloud idp as azure connected and i guess its because  users are local. Do anyone have any idea how to tackle this :) Can we use UPN or some other attribute for macbbos that uses local user account and not in domain?

I (like others) use a smart group for students which lists devices that have “Apps Not In the App Catalog Are Installed”, in case some talented student is somehow able to download or sideload apps we don’t allow. I then use a configuration profile to hide all apps except those they downloaded/sideloaded, making their device near useless until they remove the offending app.Unfortunately with the iPadOS 26 update, Jamf Pro reports all the iPad default apps (camera, contacts, calendar, etc.) in the installed apps report. As these are default and can not be purchased through the app store, there is no way to add them to the app cataloge. So now every device that updates to iPadOS 26 will be considered to have unnauthorized apps on them. Not sure if this is a bug that Jamf will be able to fix, or if there is another work around to this.

I think might be a Tahoe this? Multiple Macs in my environment have been having Self-Service+ crash whenever we run anything on it. It just closes itself with no error or explanation, and the subsequent policy doesn’t run. Tried on multiple policies with the same result on multiple different Macs, all on Tahoe (26.0). Had no problems with the Beta. Has anyone else seen this? I’ve deleted the keychain for Self Service+, re-installed, and deleted the cache for Self Service+ as well.Is this a known issue, by chance? Self Service+ version is 2.8

Is there really no longer a way to sort Jamf Discussions by date??? Finding something from 8 years ago at the top of the list is not helpful.  

Has anyone gone through the process of creating a Configuration Profile Applications & Custom Setting  payload to restrict the AI options in iTerm2 (the prefs domain is “com.googlecode.iterm2”)? And if so, can you post the profile in this thread?Since I hate to re-invent the wheel I figured I’d ask before starting to build a payload for this from scratch…

Hi all, We have a situation where we need to remove some iMacs from our Jamf instance, but we need to keep Logic on them. We have purchased Logic through Apple School Manager and it feeds into our Jamf with those purchases, so I’m assuming they will have to be connected to Jamf in some way to get the app. We need these Macs to be offline and standalone as they are old and no longer supported, so we don’t want to risk having them on the network (we’ve previously been a victim of a ransomware, so network integrity is critical now). My question is, is there a way to release the Logic licences we have purchased through Apple School Manager as, say, install codes or VPP codes (I’ve checked Jamf Pro and there is no VPP codes under Managed Distribution) so we can install them individually, or do we have to have them on Jamf to get the licences? Many thanks,Ben

I am wondering if anyone could help with a process for automating with JAMF a way to click on settings for both zoom and VIA  after the install has happen.  Both applications need system preferences adjusted in order to use the product and we need help figuring out how to get JAMF to do this after the app is installed.  Any help is greatly appreciated.        Thank You

Heads up to my fellow Jamf community. We've been seeing iPadOS 15.8.4 iPads when reprovisioned can't be enrolled to Jamf School.  This may affect Jamf Pro too.  The exact error is "Failed to retrieve configuration".  I reached out to Jamf support and they said they have been getting reports of this from others and that this has been observed across different MDM providers.  Jamf reached out to Apple regarding this issue and this is exactly what they told me: Apple did get back to us just a bit ago, and they have identified the issue (they did not elaborate on what the issue was). The release is not ready yet though and at this time they couldn't give me an ETA on when that would release. For now I created an internal Jamf Product Issue so we can track customers and I have attached this case to that ticket (PI136109). Hopefully an update that fixes this issue will come out soon.  Jamf did say that they could reproduce my issue but had mixed results as one te

We are seeing issues with machines that have broken AD binds, is there a way to automatically remove the profile and reinstall it, or can I just add those machines from a SmartGroup into the scope?

Helpful app that I ran across in Slack. Nice GUI to show you the configuration profiles installed on your macOS client.It’s helpful in pointing out deprecated keys. It also shows you duplicate keys, which is helpful. For example, if you have duplicate keys restricting macOS Deferral updates. • Link: https://github.com/ninxsoft/LowProfile  Want to see what is inside the Configuration Profiles that are installed on your Mac?  Curious to know what a Configuration Profile will enforce / change on a device before actually installing one?  Tired of having to manually un-sign Configuration Profiles, only to have to flex your XML parsing skills to find out what is inside?  Maybe you just want to qualify that your MDM vendor is creating Configuration Profiles the way you expect?

here's my problem:-a user tries to change his/her password and it fails because the mac lost trust with AD, I'm able to send configuration profiles, do a "sudo jamf recon" works fine, except the mac is not bound, even though in Directory Utility it shows its bound. -after unbinding and rebinding everything works fine.(fyi: macs are on 10.11.6 and 10.12.x with JSS: 9.96) I'm trying to avoid having to do that manually.How can I do that using a script if a mac is actually bound to AD? thank you for your help.

Jamf Compliance Editor v1.5.0 • https://github.com/Jamf-Concepts/jamf-compliance-editor